Blueberry managed to droop its lending providers shortly after struggling an exploit that led to over $1.3 million price of Ether being drained from the DeFi protocol.
In an X submit revealed on February 23, the Blueberry Protocol Basis introduced that it was at present experiencing an “ongoing exploit” and beneficial customers to withdraw their funds from Blueberry lending markets whereas the muse labored on halting the protocol.
Additional particulars of the exploit:
The entire drained funds have been entrance run by @ coffeebabe_eth (not actual twitter, not on socials) and at the moment are protected within the Blueberry multisig, much less the validator cost.
The group is in touch with safety and comms professionals and can try…
— Blueberry Protocol Basis 🫐🫐 (@blueberryFDN) February 23, 2024
Blueberry Suffers Assault
Shortly after Blueberry’s preliminary submit, customers reported having points with withdrawal, main the protocol to notice that its entrance finish was additionally down.
“The entrance finish can be down, so if you’ll be able to work together instantly with the contracts to withdraw, please do,” Blueberry stated in a separate X submit.
The web site and app went offline briefly, with each noting that “a client-side exception has occurred.”
Roughly half-hour later, Blueberry confirmed that it had efficiently suspended the protocol. Its web site has been restored and is at present totally operational.
An extra replace from the protocol acknowledged that all the drained funds had been front-run by white hat hacker c0ffeebabe.eth and at the moment are resting safely within the Blueberry multisig. A complete of 457 ETH (~$1.34 million) was initially drained, however 366 ETH (~$1.07 million) was rescued by c0ffeebabe.eth and returned to the multisig pockets, the group famous.
“Deposited funds are at present protected,” Blueberry stated. “Solely three markets have been affected and the massive majority was already returned. Whole validator cost (loss) is 91 ETH. We’re getting in contact and purpose for a full reimbursement to customers because the aim. Protocol is paused.”
The Blueberry Protocol
The Blueberry Protocol is a decentralized lending market that facilitates lending and leveraged borrowing with the flexibility to go as much as 20 instances the worth of the collateral.
In line with DefiLlama, the protocol had a complete worth locked (TVL) of $4.5 million earlier than the incident. Its TVL has now fallen to $3.11 million after the exploit try.
On February 22, Blueberry launched a “safety overview,” saying that its method to improvement and danger mitigation prioritizes safety from the outset to stop any inner dangers arising from protocol exercise.
The protocol additionally stated that it underwent audits by Hacken and Sherlock who performed two impartial token safety audits. Nonetheless, the tweet selling the “safety assessment” is now not seen on Blueberry’s X feed.
